Citrix Systems, Inc.

Deepfactor, Inc.

International Business Machines Corporation

Ringcube Technologies, Inc.

Cisco Technology, Inc.

Michael Kevin Larkin

Kiran Kamity

Shanmuga Appajodu

Scott Oberg

Yashabh Sethi

James Yarbrough

Howard Z Lee

William Deforeest

Shashikiran Uli

Gaurang Thakkar

Pradeep Padala

Himanshu Raj

Selvi Kadirvel

Srihari Kumar

Rizwan Merchant

Vikas Wadhvani

Systems, methods, and computer-readable media for intercepting telemetry events obtained during operation of an application and analyzing the telemetry events are provided. The telemetry events are intercepted at the library level by interposing on application calls to a native library. The telemetry events are collected and transmitted to a platform that analyzes the collected events and presents information based on the analysis.

Systems, methods, and computer-readable media for analyzing intercepted telemetry events to generate vulnerability reports

Systems, methods, and computer-readable media for analyzing intercepted telemetry events

Systems, methods, and computer-readable media for performing web app scans of an application are provided. Telemetry events derived from the web app scan are intercepted by a runtime that has been instrumented in conjunction with the application. The telemetry events are collected and transmitted to a platform that analyzes the collected events and presents information based on the analysis.

Systems, methods, and computer-readable media for executing a web application scan service

Systems, methods, and computer-readable media for processing telemetry events related to operation of an application

Systems, methods, and computer-readable media for instrumenting an application to operate in conjunction with a telemetry interception and analysis platform

In one embodiment, a system has host machines forming a cluster. Each host machine runs containers, where each container includes a segment of hardware resources associated with the host machine, a segment of an operating system utilized by the host machine, and at least one application. Host agents operate on the host machines. Each host agent collects operational parameters associated with the containers on each host machine. A management platform is operative to divide the cluster into container pools, where each container pool includes a sub-set of computation resources in the cluster and has associated container pool metrics including a priority level and computation resource limits. Operational parameters are collected from the host agents. The operational parameters are evaluated in accordance with the container pool metrics.

Container management and application ingestion engine

A method and system for updating a collection of software resources in a virtual desktop infrastructure system. Virtual machines associated with sets of virtual disk elements in a hierarchy of disk layers, such as basic, department, or user virtual disks are offered updates for one or more available software resources. Updates available for deployment in the virtual desktop infrastructure system are recorded in a database by a controller server. The controller server takes an inventory of all the virtual machines associated with each disk layer in the hierarchy of disk layers on which to apply the available updates. The controller server applies the one or more updates to the identified virtual machines, and stores the update application results in a database. The controller server may apply the one or more updates to virtual machines associated with descendant disk layers in the hierarchy of disk layers in view of previous applications of the updates.

System updates with personal virtual disks

A computing system is configured to use a trampoline to isolate sensitive code in a virtual environment and in other applications. An import table may describe the entry points of a privileged code module or driver that generates privileged code. A system and method loads a shadow kernel to facilitate isolating the linkage between drivers and the rest of the system. The shadow kernel may be a copy of the operating system kernel that does not have the same integral position in the operation of the computing device. The shadow kernel may be used as a template for creating a jump table to redirect more critical privileged resource access requests from specially loaded kernel mode drivers to the PVM. All requests may pass through the PVM, which redirects non-critical functions to the original kernel. Multiple copies of a given driver or code module may be loaded in a given session.

System and method for managing code isolation

Systems and methods for providing virtual stacks are described. A kernel driver is installed and loaded. Then, a virtual stack is created, the virtual stack having a virtual file system, a virtual physical disk, and one or more virtual mounted volume devices. The virtual file system is configured to mimic characteristics of a host file system. The virtual physical disk is configured for providing an interface of a memory storage device to which the virtual file system device binds. The one or more virtual mounted volume devices are configured for allowing the one or more virtual processes to access data in stored memory through the virtual stack.

Systems and methods for input/output isolation

Systems and methods are provided for intelligent resource management for a virtual machine. A method for operating a virtual environment can comprise receiving a request for a resource from an application, processing the request to identify the resource, determining whether the resource is for the virtual environment, and modifying a part of a data structure for the request based on a reference to the resource in the virtual environment.

Resource management in virtual machines using dynamic table for performing resource queries

An exemplary method for a hot pluggable virtual machine comprises authenticating a user within an active host environment on a host device, executing a virtual machine driver, configuring a guest environment, and activating the guest environment for the virtual machine on the host device.

Hot pluggable virtual machine

Growing community of inventors

San Jose, CA, United States of America

Michael Kevin Larkin